The NIS 2 Directive (EU) 2022/2555 is intended to raise the level of IT security in Europe significantly. The directive applies not only to federal government authorities, but also to entities deemed essential or important in sectors considered particularly critical. In order to determine whether a company is subject to the regulation, it must first be established whether it operates within one of the affected sectors. Secondly, the company must meet certain thresholds in order to be classified as an essential or important entity. For the entities concerned, stricter requirements will apply to network and information systems, and reporting obligations will be expanded. Management responsibilities will also increase. The directive will affect significantly more companies and sectors than before. As well as broadening the scope within sectors already regulated under the NIS 1 Directive such as energy, transport and healthcare, the NIS 2 Directive now covers additional areas, including digital services, postal and courier services, wastewater and waste management, and 'manufacturers of critical products'.

Hardly any other topic has such a tangible cross-border dimension as space travel. And hardly any other topic has been so fragmentarily regulated to date. This is set to change with the planned EU Space Act, a draft of which was presented by the European Commission on 25 June 2025. The legislative process is following the normal procedure, which means that discussions will now begin in the European Parliament and the Council of the European Union.

BLOMSTEIN assisted Xerox Holdings Corporation on German foreign direct investment control aspects relating its acquisition of Lexmark International, Inc. The deal valued at USD 1.5 billion was completed on July 1.

 On August 1, 2025, additional cybersecurity requirements will come into force for a large number of electronic devices under the Radio Equipment Directive (Directive 2014/53/EU; RED). Despite this approaching deadline, many issues are still unclear, in particular the scope of application of the new regulations and the interpretation of the term "internet-connected radio equipment ".

BLOMSTEIN advised US investment firm Summit Partners on German foreign direct investment control aspects relating the sale of its shares in ELATEC to leading security and solutions provider Allegion plc. The transaction is valued at €330 million on a cash-free, debt-free basis, and is expected to close in the third quarter of 2025.

In der unternehmensinterne Compliance wird Künstliche Intelligenz (KI) zunehmend eingesetzt. Besonders in der Exportkontrolle und im Zollrecht lassen sich durch KI signifikante Zeit- und Effizienzgewinne erzielen, etwa bei der automatisierten Zuordnung von Produkten zu Zolltarifnummern, dem Abgleich von Kunden mit Sanktionslisten oder der Identifizierung relevanter Regelwerke. Eine besonders sorgfältige, rechtlich einwandfreie Vorgehensweise ist unerlässlich. In diesem Briefing erläutern wir, wie KI auch in reaktiven Compliance-Prozessen der Exportkontrolle und des Zollrechts Chancen bietet. Die rechtlichen Herausforderungen, die dabei berücksichtigt werden müssen, haben wir bereits in unserem Briefing „KI in internen Untersuchungen“ aufgezeigt.

Auf grundlegende technologische Innovationen folgen oft spezialisierte Anwendungen – so seit einigen Jahren auch im Bereich der künstlichen Intelligenz (KI). KI gewinnt auch für interne Untersuchungen zunehmend an Bedeutung. Unternehmen stehen unter wachsendem regulatorischem, gesellschaftlichem und wirtschaftlichem Druck, Compliance-Verstöße frühzeitig zu erkennen und angemessen zu adressieren. Gleichzeitig explodieren die unternehmensintern erzeugten Datenmengen, die mit herkömmlichen Mitteln kaum noch zu durchdringen sind. KI-Systeme versprechen hier eine große Hilfestellung: Sie können riesige Datensätze analysieren und Muster erkennen, die Menschen übersehen würden. Zudem bieten sie neue Möglichkeiten der Automatisierung, Skalierung und Effizienzsteigerung.

Two months after the European Commission published its Competitiveness Compass, we take a deeper look into its strategic vision to enhance the EU’s economic resilience and global competitiveness (following up on our first overview), namely the competition law aspects. The Commission is rather clear that it seeks to establish Europe’s competitiveness as the new “North Star”. However, what is not so clear: Through which paths will the Commission lead us on our journey to this North Star?

After the Oscar-worthy performance in its opening act, the DMA series is back with a brand-new season, packed with twists, turns, and regulatory cliffhangers. On March 19, 2025, the European Commission stepped into the spotlight with two decisive moves: First, it handed Apple a script rewrite, demanding new specified measures to meet interoperability obligations under the DMA. Second, it preliminarily found Alphabet in breach of the DMA by self-preferencing in Google Search and enforcing restrictive steering rules in Google Play.

In view of the increasingly acute threat situation, driven in particular by growing doubts about the US' loyalty to NATO and the resulting restriction of the conventional and nuclear deterrence, the question arises: How well prepared is Germany for a further escalation of conflicts, especially that with Russia? Should asymmetric warfare - including against Germany - have even more far-reaching consequences, what legal instruments are available to the state in order to remain capable of acting in an external or internal emergency (innerer oder äußerer Notstand)? This briefing sheds light on the security and precautionary laws (Sicherstellungs- und Vorsorgegesetze), which have been rather neglected to date, and which (should) provide the necessary instruments for such situations.